Browse CVEs

HIGH 7.8 CVE-2023-5586 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. Gpac 2.3.0+ Fix from $1,9502023-10-15 HIGH 7.5 CVE-2023-38171EPSS 69% Microsoft QUIC Denial of Service Vulnerability .net 7.0.12 / 10.0.22621.2428+ Fix from $1,9502023-10-10 HIGH 7.5 CVE-2023-36709 Microsoft AllJoyn API Denial of Service Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.17763.4974+ Fix from $1,9502023-10-10 HIGH 7.5 CVE-2023-36602 Windows TCP/IP Denial of Service Vulnerability Windows 10 1507 10.0.14393.6351 / 10.0.17763.4974+ Fix from $1,9502023-10-10 HIGH 7.5 CVE-2023-36603 Windows TCP/IP Denial of Service Vulnerability Windows 10 1809 10.0.17763.4974 / 10.0.19041.3570+ Fix from $1,9502023-10-10 MEDIUM 5.5 CVE-2023-5441 NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. Fedora 9.0.1994+ Fix from $1,6002023-10-05 MEDIUM 5.5 CVE-2023-42754 A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be associated with a device before c… Linux Kernel 6.6+ Fix from $1,6002023-10-05 MEDIUM 5.5 CVE-2023-43898 Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to … Stb Image.h Patch available Fix from $1,6002023-10-03 HIGH 7.5 CVE-2023-24847 Transient DOS in Modem while allocating DSM items. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-10-03 HIGH 7.5 CVE-2022-48606 Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect avai… Emui Mitigation only Fix from $1,9502023-09-27 MEDIUM 6.5 CVE-2023-20233 A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause … Ios Xr 7.5.4 / 7.6.3+ Fix from $1,6002023-09-13 MEDIUM 5.5 CVE-2023-40032 libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlie… Fedora 8.14.4+ Fix from $1,6002023-09-11 MEDIUM 5.7 CVE-2023-4875 Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12 Debian Linux 2.2.12+ Fix from $1,6002023-09-09 MEDIUM 6.5 CVE-2023-4874 Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 Debian Linux 2.2.12+ Fix from $1,6002023-09-09 HIGH 7.5 CVE-2023-37368 An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem… Exynos 9810 Firmware Mitigation only Fix from $1,9502023-09-08 HIGH 7.5 CVE-2023-41909 An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed requests with no attributes,… Debian Linux after 9.0 Fix from $1,9502023-09-05 MEDIUM 5.5 CVE-2023-41633 Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. Catdoc Mitigation only Fix from $1,6002023-09-01 HIGH 7.5 CVE-2023-39351 FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versions of FreeRDP are subject to… Debian Linux 2.11.0+ Fix from $1,9502023-08-31 MEDIUM 5.5 CVE-2023-4681 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3+ Fix from $1,6002023-08-31 MEDIUM 5.5 CVE-2023-4683 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV. Gpac 2.3-dev+ Fix from $1,6002023-08-31 HIGH 7.5 CVE-2023-41358 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. Debian Linux after 9.0 Fix from $1,9502023-08-29 MEDIUM 6.5 CVE-2023-38711 An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr p… Libreswan 4.12+ Fix from $1,6002023-08-25 MEDIUM 6.5 CVE-2023-38712 An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload … Libreswan 4.0 / 4.12+ Fix from $1,6002023-08-25 HIGH 7.5 CVE-2023-36199 An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component. Sgxwallet after 1.9.0 Fix from $1,9502023-08-25 MEDIUM 5.5 CVE-2023-38665 Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash). Netwide Assembler No fix yet Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2022-35206 Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c. Binutils Patch available Fix from $1,6002023-08-22 CRITICAL 10.0 CVE-2022-36648 The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash … Qemu after 7.0.0 Fix from $2,3002023-08-22 HIGH 7.5 CVE-2022-28070 A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. Radare2 Patch available Fix from $1,9502023-08-22 MEDIUM 6.5 CVE-2021-40264 NULL pointer dereference vulnerability in FreeImage before 1.18.0 via the FreeImage_CloneTag function inFreeImageTag.cpp. Freeimage 1.18.0+ Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2021-40266 FreeImage before 1.18.0, ReadPalette function in PluginTIFF.cpp is vulnerabile to null pointer dereference. Freeimage 1.18.0+ Fix from $1,6002023-08-22